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A retail method over a 
wide area network. The wide 
area network includes a point 
of sale computer station (41), 
a network service provider 
server (31. 32 33) op- 
erated by a network service 
provider (31, ...» 33), a cus- 
tomer computer station (51, 
52, 72) used by a customer 
and connected to the wide 
area network through the net- 
work service provider server 
(31, 32, .... 33), and a trans- 
action server (20) having ac- 
cess to identification infonna- 
tion of the network service 
provider (31, .... 33) and the 
point of sale computer station 
(41 43). The method in- 
cludes the steps of connecting 
the customer computer station 
(51, 72) to the point of 
sale computer station (41, .... 
43), purchasing goods from 
the point of sale computer sta- 
tion (41 43) by the customer, validation of the purchasing by the transaction server (20) and the network service provider server (31. 

.... 33). charging the customer for the purchase. The step of charging includes a transaction including the steps of billing an account of the 
customer by the network service provider server (31. .... 33) a transaction sum and billing by the transaction server (20) an account of the 

network service provider server (31 33) the transaction sum. The retail method also includes supplying the goods to the customer and 

remitting a portion of the transaction sum to a vendor operating the point of sale computer station (41. .... 43). 
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A RETAIL METHOD OVER A WIDE AREA NETWORK 

FIELD OF THE INVENTION 

The present invention relates generally to a retail method for performing 
commercial transactions over a \Ni6e area netv\/ork and more particularly to a retail 
method for performing commercial transactions over the Internet. 

BACKGROUND OF THE INVENTION 

The Internet is a worldwide network of interconnected computers and 
computer networks. The Internet includes Internet service providers (ISPs) who 
provide Internet access to a large number of subscribers or users who may pay 
the ISP a fee for the access. The subscribers can be individuals or organizations 
and can access the Internet by connecting to the ISP using modems over the 
general switched telephony system (GSTN), or cable television networks, or other 
types of communication line infrastructure. The Internet also includes vendors 
who advertise products and services over the Internet and solicit orders from 
users. 

Commercial transactions over the Internet can be performed in a variety 
of ways. A preferred way of payment is by credit card. However, because of 
security reasons there is great reluctance of the users to transmit credit card 
account information over the Internet. Additionally, in situations where the 
transaction amount is small, for example, a few dollars or less, it may not be 
practical for a vendor to use a credit card transaction. 

PCT international publication No. WO 97/03410 to Egendorf discloses a 
method for Internet billing. According to Egendorf, an ISP can bill a billing 
account of a customer for products or services purchased from a vendor over the 
Internet, thereby avoiding the need to communicate the customer's credit card or 
account number over the Internet. However, the method is limited in that each 
ISP has to establish agreements with a multiplicity of vendors some of which may 
not be subscribers of the ISP. Furthermore, each vendor has to establish 
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separate agreements with a multiplicity of ISPs to be able to use the method of 
WO 97/03410 for performing transactions with customers of different ISPs. 
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SUMMARY OF THE INVENTION 

The present invention relates to a system and method which provides 
vendors and customers a secure and economical way of selling and purchasing 
goods over a wide area network. A commercial account is established for 

5 customers at their network service provider. When a customer orders a product 
from a vendor via the wide area network, payment for the product is debited from 
the customer's network service provider account. A secure transaction service 
cooperates with the customer, the vendor and the network service provider to 
authorize the transaction. 

10 Significantly, the invention enables a customer to purchase a product via 

the network without transmitting sensitive information such as a credit card 
• number over the network. Moreover, the user does not need to install additional 
software on his computer for using the billing method of the present invention. 

One embodiment of the present invention provides a retail method that 

15 is adapted for use over the Internet. However, other preferred embodiments can 
be implemented in which the retail method is adapted for use over any wide area 
network using any suitable communication protocol which is within the scope and 
spirit of the present invention. 

There is therefore provided, in accordance with a prefen-ed embodiment 

20 of the present invention, a retail method over a wide area network. The network 
includes a point of sale computer station (e.g., a vendor's network server), a 
network service provider server operated by a network service provider, a 
customer computer station used by a customer and connected to the wide area 
network through the network service provider server, and a transaction server 

25 having access to identification information of the network service provider and the 
point of sale computer station. 

The basic process flow of the retail method includes: Connecting the 
customer computer station to the point of sale computer station. Purchasing 
goods from the point of sale computer station by the customer. Validating the 

30 purchasing by the transaction server and the network service provider server. 
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Charging the customer for the purchasing, the charging including a transaction 
including the steps of billing an account of the customer by the network service 
provider server a transaction sum and billing by the transaction server an account 
of the network sen/ice provider server the transaction sum. Supplying the goods 

5 to the customer. Remitting a portion of the transaction sum to a vendor operating 
the point of sale computer station. 

in one preferred embodiment of the invention, the validating process 
includes: Automatically receiving by the transaction server from the customer 
computer station of the transaction details and identification information for 

10 identifying the point of sale computer station and the network address of the 
customer computer station. Sending a transaction verification form from the 
transaction server to the customer computer station, the transaction verification 
form includes at least the transaction details and information for contacting the 
network service provider server. Entering by the customer in the transaction 

15 verification form a confirmation or a denial of the transaction details. Sending by 
the customer computer station of the transaction details and the confirmation or 
the denial of the transaction details from the customer computer station to the 
network sen/ice provider server using the information for contacting the network 
service provider server included in the transaction verification form. Informing the 

20 transaction server by the network service provider server of the confirmation or 
the denial of the transaction details by the customer in the transaction verification 
form. Instructing the point of sale computer station by the transaction server to 
supply or deny the goods to the customer in accordance with the confirmation or 
the denial, respectively, of the transaction details by the customer. 

25 In another preferred embodiment of the present invention, the network 

service provider provides the transaction verification form to the customer. Here, 
instead of the secure transaction server providing the form to the customer, the 
secure transaction server sends the necessary information to the network service 
provider to enable the network service provider to send the form. 

30 In this embodiment, the step of validating includes: Automatically 

receiving by the transaction server from the customer computer station of 
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transaction details of the transaction and identification information for identifying 
the point of sale computer station and the network address of the customer 
computer station. Sending the transaction details and the network address of the 
customer computer station from the transaction server to the network service 

5 provider server. The transaction server causing the customer computer station to 
contact the network service provider. Sending a transaction verification form from 
the network service provider server to the customer computer station, the 
transaction verification form including at least the transaction details. Entering by 
the customer in the transaction verification form a confirmation or a denial of the 

10 transaction details. Sending by the customer computer station of the confirmation 
or the denial of the transaction details from the customer computer station to the 
network service provider server. Informing the transaction server by the network 
service provider server of the confirmation or the denial of the transaction details 
by the customer in the transaction verification fomri. Instructing the point of sale 

15 computer station by the transaction server to supply or deny the goods to the 
customer in accordance with the confirmation or the denial, respectively, of the 
transaction details by the customer. 

There is also provided, in accordance with a preferred embodiment of 
the present invention a system for using a retail method over a wide network. The 

20 system includes at least one network service provider server operated by a 
network service provider and connected to the wide area network. The system 
also includes at least one customer computer station used by a customer and 
connected to the wide area network through one of the network service provider 
servers. The system also includes at least one point of sale computer 

25 station connected to the wide area network and at least one transaction server 
having access to identification information of the at least one network service 
provider and the at least one point of sale computer station and connected to the 
wide area network. 

The retail method steps performed by the system are similar to those of 

30 the methods discussed above. Namely, connecting one of the customer 
computer stations to one of the points of sale computer station. Purchasing 
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goods from the point of sale computer station by the customer operating the 
customer computer station. Validating the purchasing by one of the transaction 
servers and one of the network service provider servers. Charging the customer 
for the purchasing, the charging including a transaction including the steps of 
billing an account of the customer by the network service provider server a 
transaction sum and billing by the transaction server an account of the network 
service provider server the transaction sum. Supplying the goods to the 
customer. Remitting a portion of the transaction sum to a vendor operating the 
point of sale computer station. 

The validating steps performed by the system are similar to the method 
steps described above as well. In one embodiment, the step of validating 
includes: Automatically receiving by the transaction server from the customer 
computer station of transaction details of the transaction and identification 
infomnation for identifying the point of sale computer station and the network 
address of the customer computer station. Sending a transaction verification form 
from the transaction server to the customer computer station, the transaction 
verification form including at least the transaction details and information for 
contacting the network sen/ice provider server. Entering by the customer in the 
transaction verification form a confirmation or a denial of the transaction details. 
Sending by the customer computer station of the transaction details and the 
confirmation or the denial of the transaction details from the customer computer 
station to the network sen/ice provider server using the information for contacting 
the network service provider server included in the transaction verification form. 
Informing the transaction server by the network service provider server of the 
confirmation or the denial of the transaction details by the customer in the 
transaction verification form. Instructing the point of sale computer station by the 
transaction sen/er to supply or deny the goods to the customer in accordance with 
the confirmation or the denial, respectively, of the transaction details by the 
customer. 

The system may also provide a retail method whereby the network 
service provider supplies the transaction verification form to the customer in a 
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similar manner as performed by the metliod discussed above. In accordance with 
this embodiment of the system of the invention, the step of validating includes: 
Automatically receiving by the transaction server from the customer computer 
station of transaction details of the transaction and identification information for 
identifying the point of sale computer station and the network address of the 
customer computer station. Sending the transaction details and the network 
address of the customer computer station from the transaction server to the 
network service provider server. The transaction server causing the customer 
computer station to contact the network service provider. Sending a transaction 
verification form from the network service provider server to the customer 
computer station, the transaction verification fonn including at least the 
transaction details. Entering by the customer in the transaction verification fomn a 
confirmation or a denial of the transaction details. Sending by customer computer 
station of the transaction details and the confirmation or the denial of the 
transaction details from the customer computer station to the network service 
provider server. Informing the transaction server by the network service provider 
server of the confirmation or the denial of the transaction details by the customer 
in the transaction verification form. Instructing the point of sale computer station 
by the transaction server to supply or deny the goods to the customer in 
accordance with the confirmation or the denial, respectively, of the transaction 
details by the customer. 

In another embodiment of the invention, the customer responds to the 
secure transaction server instead of the network sen/ice provider during the 
verification operation. For example, the customer does not contact the network 
service provider to send a transaction confirmation/denial. Instead, the customer 
sends the confirmation/denial to the secure transaction server. To ensure that the 
customer is authorized to make the transaction, the secure transaction server 
contacts the network service provider server to obtain the customer identity. 

In another embodiment of the invention, the network service provider 
identifies the customer using the telephone number of the customer. The 
customer's telephone number is supplied to the network service provider, for 
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example, over the telephony infrastmcture when the customer calls the network 
service provider. In one embodiment, the customer's telephone number is used 
to bill the customer's telephone account for the product the customer purchased 
from the vendor. 

5 In another embodiment of the invention, the step of identifying the 

customer is done by the STS rather than the NSP. In this case, the STS remotely 
accesses the NSP's servers to match the network address with a user account 
The STS may also carry out the step of determining whether the customer is 
authorized to make a purchase. As a result, the method of the invention may be 

10 practiced without installing the ISP-related software applications treated herein on 
the network service provider server. 

In accordance with other embodiments of the Invention, several 
methods may be used to obtain a customer's network address in the event the 
customer is using a proxy server. For example, the address may be obtained 

15 from the HTTP "Fonwarded For" header. The address may be obtained by having 
the customer's browser connect in the background to an unproxled service. The 
address may be obtained by having the customer's browser connect in the 
background to an unproxied host. Alternatively, an application that will attempt to 
contact the secure transaction service or the network service provider may be 

20 downloaded to the customer's computer station. 

Several other process steps may be performed in accordance with one 
or more embodiments of the invention. For example, the retail method may 
include the step of remitting a portion of the transaction sum to a network service 
provider operating the network sen/ice provider server. The retail method also 

25 may include the step of remitting a portion of the transaction sum to the 
transaction service provider operating the transaction server. 

Further, in accordance with another preferred embodiment of the 
present invention, the identification information of the network service provider 
and the point of sale computer station includes information for associating a 

30 customer network address with a network service provider and technical 
information needed to contact the network service provider server, and 
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information for associating a vendor identifier with the technical information 
needed to contact the point of sale computer station over the wide area network. 

Furthermore, in accordance with another preferred embodiment of the 
present invention, the information for associating a customer and the information 
5 for associating the vendor are stored on the transaction server or accessible to 
the transaction server. 

Furthermore, in accordance with another preferred embodiment of the 
present invention, the wide area network is the Internet, the network service 
provider is an Internet service provider, the information for associating a customer 
10 includes at least the Internet protocol (IP) address space of the Internet service 
provider server and the technical information needed to contact the Internet 
service provider, and the information for associating the vendor is technical 
information needed to contact the point of sale computer station over the Internet. 

Furthermore, in accordance with another preferred embodiment of the 
15 present invention, the step of charging further includes the step of recording by 
the network service provider server of the transaction details for billing the 
customer by the network sen/ice provider 

Furthermore, in accordance with another preferred embodiment of the 
present invention, the step of remitting includes the step of crediting an account of 
20 the vendor by the portion of the transaction sum. 

Furthermore, in accordance with another preferred embodiment of the 
present invention, the step of crediting is performed by a financial service 
provider. 

Furthermore, in accordance with another preferred embodiment of the 
25 present invention, the financial service provider is selected from the group 
consisting of a bank and a credit card company. 

Further yet. in accordance with another preferred embodiment of the 
present invention, the account of the vendor is a bank account or a credit card 
account. 

30 Further still, in accordance with yet another preferred embodiment of the 

present invention, the communication between the point of sale computer station 
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and the transaction server and between the transaction server and the network 
service provider server is encrypted. 

Furthermore, in accordance with another preferred embodiment of the 
present invention, the transaction service provider operating the transaction 
server establishes a remitting agreement with the vendor for remitting a portion of 
the transaction sum to the vendor after the step of charging. The remitting 
agreement is established prior to using the retail method and the transaction 
service provider establishes a billing agreement with the network service provider 
for billing an account of network sen/ice provider the transaction sum for goods 
purchased by the customer from the point of sale computer station. The billing 
agreement is established prior to using the retail method. 

Furthermore, in accordance with another preferred embodiment of the 
preisent invention, the network service provider establishes a billing agreement 
with the customer for billing an account of the customer the transaction sum for 
goods purchased by the customer from one or more point of sale computer 
stations. In one embodiment, the billing agreement may be established prior to 
using the retail method. In another embodiment, a customer may be presented 
the terms of the agreement the first time he uses the retail method. This may be 
accomplished, for example, by displaying a corresponding window or web page to 
the customer. In this case, the customer could accept the terms of the agreement 
by, for example, clicking a button on the window or web page. 

Finally, in accordance with another prefenred embodiment of the present 
invention, a per transaction billing agreement is established between the 
customer and the network service provider for billing an account of the customer 
the transaction sum for goods purchased by the customer from the point of sale 
computer station. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

These and other features of the invention will become apparent from the 
following description and claims, when taken with the accompanying drawings, 
wherein similar reference characters refer to similar elements throughout and in 
5 which: 

Fig. 1 is a schematic block diagram of a system for carrying out the retail 
method over the Internet, in accordance with a preferred embodiment of the 
present invention; 

Fig. 2 is a schematic flow chart illustrating one embodiment of the steps 
10 of the retail method performed by a customer using the customer computer 
station of the system of Fig. 1; 

Fig. 3 is a schematic flow chart illustrating one embodiment of the steps 
of the retail method performed by a point of sale computer station of the system of 
Fig. 1; 

15 Fig. 4 is a schematic flow chart illustrating one embodiment of the steps 

of the retail method performed by a secure transaction server (SIS) of the system 
of Fig. 1; 

Fig. 5 is a schematic flow chart illustrating one embodiment of the steps 
of the retail method performed by an Internet service provider (ISP) server of the 
20 system of Fig. 1; 

Fig. 6 is a schematic flow chart illustrating another embodiment of the 
steps of the retail method performed by an Internet service provider (ISP) server 
of the system of Fig. 1; 

Fig. 7 is a schematic flow chart illustrating another embodiment of the 
25 steps of the retail method perfomried by a secure transaction server (STS) of the 
system of Fig. 1; 

Fig. 8 is a schematic flow chart illustrating another embodiment of the 
steps of the retail method performed by an Internet service provider (ISP) server 
of the system of Fig. 1; 
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Fig. 9 is a schematic flow cliart illustrating another embodiment of the 
steps of the retail method performed by a secure transaction sen/er (STS) of the 
system of Fig. 1; 

Fig. 10 is a schematic flow chart illustrating another embodiment of the 
5 steps of the retail method performed by a secure transaction server (STS) of the 
system of Fig. 1; and 

Fig. 11 is a block diagram illustrating several data memory 
components in accordance with one embodiment of the invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

Reference is now made to Fig. 1 which is a schematic block diagram of 
a system for carrying out the retail method, in accordance with a preferred 
embodiment of the present invention. The system includes a secure transaction 
service provider 20 (STSP) which includes a plurality of M secure transaction 
servers (STS) labeled 21-23 connected to the Internet 10. The system also 
includes a plurality of N Internet sen/ice provider (ISP) servers labeled 31 - 33 
connected to the Internet 10, and a plurality of K point of sale computer stations 
labeled 41 - 43, connected to the lntemet.10. Each of the plurality of N ISP 
servers provides Internet access to a plurality of customer computer stations. For 
example, ISP server 31 provides Internet access to a plurality of R customer 
computer stations labeled 51-52, ISP server 32 provides Internet access to a 
plurality of S customer computer stations labeled 61-62 and ISP server 33 
provides Internet access to a plurality of N customer computer stations labeled 
71-72. Wherein each of the numbers K, M, N, Q. R and S may be any non-zero 
positive integer. 

Typically, a customer connects to the Internet via an ISP. When 
connecting, the customer is identified using some standard method such as a 
username and password, and is assigned an IP address. The ISP sen/er of the 
present invention then associates the assigned IP address with the customer 
identity, or with any other data suitable for identifying and/or billing the customer. 
In a non-limiting example, the telephone number of the customer can be 
associated with the customer's IP address, as described hereinabove. However, 
other suitable identifying and/or billing data types may be used. 

The customer then initiates a transaction by accessing a point of sale 
computer station using one of the customer computer station, and interacts with 
the application running on the point of sale station to select a product to be 
purchased. In accordance with one embodiment of the invention, the customer Is 
billed for the transaction by debiting an account that has been established 
between the customer and the customer's ISP. The STS coordinates the 
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transaction authorization procedure that determines whether the customer has an 
account that can be debited. For example, the point of sale station asks the STS 
whether the customer is authorized to make a purchase using the system. The 
STS determines (in cooperation with the ISP) whether the customer is authorized 
and sends the appropriate response back to the point of sale station. 

The secure transaction service provider 20 is a service provider 
operating one or more STSs connected to the Internet. The STSP 20 provides 
software modules which are installed on point of sale computer stations, on the 
ISP sen/ers and on each of the STSs. It is noted that, if the ISP has more than 
one server, the software modules may be installed on each of the ISP servers or 
only on part of them. Each of the ISPs notifies the STSP 20 of the IP address 
space which the ISP allocates to its customers for connecting to the Internet, as 
allocated to the ISP by the proper authorities such as the American Registry for 
Internet Numbers ("ARIN"). Each of the ISPs may also provide the STSP with 
other technical information which may be needed such as the IP addresses of the 
ISP's proxy servers and the bandwidth of the ISP's connection to the Internet. 

The software module installed on the ISP servers can identify a 
customer (236. FIGURE 11) currently using a given IP address (238, FIGURE 
11). This software module also manages the billing of the customers in 
accordance with the purchase of goods from various vendors, manages the 
communication with the STS and the customer computer stations and checks 
whether the customer is certified to pay through the STSP as disclosed in detail 
hereinafter. It is noted that some of the functionality of the ISP software module 
might already exist on the ISP servers, and can be used instead. 

The software module installed on the point of sale computer stations 
manages the registration of the sales and transactions done through the STSP 
involving the vendor This software module also manages the pricing of goods 
offered by the vendor through the STSP. It is noted that some of the functionality 
of the point of sale software module might already exist on the point of sale 
servers, and can be used instead. 
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The software module on the point of sale computer stations also 
manages the communication with the STS, as disclosed in detail hereinafter. 

The software module installed on the STS uses a database or a table 
(stored in a data memory 220, FIGURE 11) including identification information 
associating the IP address spaces (222, FIGURE 11) obtained from the ISPs as 
disclosed hereinabove with the information (224) needed to communicate with the 
ISPs owning these address spaces. 

The software module installed on the STS can thus identify the ISP of a 
customer having an IP address by accessing the database or table disclosed 
hereinabove. The software module installed on the STSs also manages the 
financial information (226) needed for implementing the billing such as the bank 
account numbers of the ISPs and vendors, and the details of purchases (228). 
The software module installed on the STS also manages all the communication 
with the point of sale computer stations, customer computer stations and ISP 
servers, as disclosed in detail hereinafter. 

Each of the point of sale computer stations 41 - 43 is assigned an ID 
number and the STSs have access to a look up table (LUT) 230 which associates 
each point of sale computer station's ID number with the technical information 
needed to contact the point of sale computer station. 

The STSP, the customers, the vendors and the ISPs receive financial 
services from one or more financial service providers 240 (FIGURE 11) such as a 
credit card company or a bank or any other suitable financial service company. 
The STSP, the customers, the vendors and the ISPs have bank accounts or credit 
card accounts with the financial service providers and can provide a bank account 
number or a credit card number for performing financial transactions. In one 
embodiment, transactions between the financial service company are 
accomplished using the Automatic Clearing House Format. 

It should be understood that many variations of the embodiment of 
FIGURE 1 are possible in accordance with the teachings of the invention. For 
example, preferably each of the M STSs 21 - 23 is directly connected to the 
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Internet backbone (not shown) for fast access. However, some or all of the STSs 
can be connected to the Internet 10 by any other suitable connection method. 

Each of the K point of sale computer stations labeled 41-43 can be a 
sen/er operated by a vendor and connected to the Internet directly, a point of sale 
application (e.g., a vendor application) residing on a server and operated for a 
vendor by an Internet presence provider (IPP) or any point of sale computer 
station connected to the internet by any other suitable connection method. 

It is noted that, the STSP 20 may also operate as an IPP. Thus, any 
one of the K points^«of sale may not be independent computer stations but may 
physically reside on one of the STSs 21-23. In such a case, the software for the 
vendor's site will be installed on one or more of the STSs 21 - 23. 

It is further noted that, the ISP 20 may also operate as an IPP. Thus, 
any one of the K points of sale may not be independent computer stations but 
may physically reside on one of the ISP servers 31 - 33. In such a case, the 
software for the vendor^s site will be installed on one or more of the ISP servers 
31-33. 

It is further noted that, each ISP may operate more than one server (not 

shown). 

Each of the customer computer stations 51 - 52, 61 - 62 and 71 - 72 can 
be connected to the ISP servers 31, 32 and 33, respectively, through a modem 
and the GSTN or a cable modem and a cable television network, or by any other 
suitable communication method. 

It is noted that, although the system of Fig. 1 is shown as including a 
plurality of STSs 21 -23, the system can also operate with a single STS. 

It is noted that the STSs 21- 23 of the STSP 20 can be located in the 
same geographical location but can also be located singly or in groups at 
separate geographical locations. 

With the above description in mind, procedures that may be performed 
by the embodiment of FIGURE 1 (or other embodiments of the invention) will now 
be treated in more detail. 
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In accordance with a prefenred embodiment of the present invention, 
when any one of the customer computer stations 51 - 52, 61 - 62 or 71 - 72 
connects to the wide area network 10 through the ISP servers 31, 32 or 33, 
respectively, the customer computer station can connect with any one of the point 

5 of sale computer stations labeled 41 - 43. The customer can request goods as a 
service or a product which are offered for sale by the vendor. For example, after 
entering the vendor's site, the customer may request goods by choosing a 
specific option on a web page. 

If the vendor allows payment for the requested service or product 

10 through the STSP method, and the customer elects to use the STSP payment 
method option on the web page, the point of sale computer station causes the 
customer computer station to connect to one of the available STSs 21 - 23 and to 
transfer the ID of the point of sale computer station and the transaction details to 
the available STS. This can be done, for example, by using an hypertext markup 

15 language (HTML) tag such as an "href tag referring to the STS server, followed 
by the ID of the point of sale computer station and the transaction details. This 
may also be done using an HTTP 302 Status Response accompanied by a 
"Location:" header, followed by the ID of the point of sale computer station and 
the transaction details. The address of the STS servers (232, FIGURE 11) 

20 associated with the point of sale computer may be stored in a data memory 234 
(FIGURE 11). The transaction details include the price and serial number of the 
requested product or sen/ice and additional details such as the payment date or 
other payment terms. 

After the customer computer station contacts the available STS. the STS 

25 sends the customer computer station a transaction verification form. The 
transaction verification form is generated by HTML or Java or by any other 
suitable method. 

The transaction verification fomn Informs the customer about the 
requested product or service, the price and the payment terms for the transaction. 
30 The transaction verification form also includes information (224, FIGURE 11) 
which is not shown to the customer. This information includes the address of the 
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ISP server, the STS and/or the point of sale computer station which provides 
service to the customer. This infomiation is obtained from the database or the 
table accessible to the STSs as disclosed hereinabove, by using the automatically 
revealed IP address (222, FIGURE 11) of the customer computer station, in the 
5 case where the ISP server address is included, or by using the vendor ID, in the 
case where the point of sale computer station address is included, and may be 
formatted in the transaction verification form as a uniform resource locator (URL) 
in an HTML link. 

It is noted that, if the communication is performed over a wide area 

10 network having a communication protocol other than the exemplary IP protocol of 
the Internet, other data, appropriate for the communication protocol which is used 
over the wide area network, will be used to identify the customer's ISP. 

The customer can either confirm or deny the transaction after inspecting 
the transaction details on the transaction verification form. If the customer 

15 confirms the transaction, the customer thus connects to the ISP server using the 
data sent from the STSs in the transaction verification form, and the relevant data 
in the transaction verification form is then sent to the ISP server. The software 
module of the ISP server identifies the customer (236, FIGURE 11) according to 
the IP address (238, FIGURE 11) or other information such as a physical 

20 communication port ID and checks whether the customer is certified to pay 
through the STSP (e.g., whether the customer has a debit account, e.g.. 248, 
FIGURE 1 1 . established with the ISP). 

It is noted that the verification of the customer computer station's identity 
by the ISP has the advantage of being less susceptible to fraudulent interference, 

25 since the ISP server is not connected to the customer computer station over the 
Internet, in contrast to the STS or the point of sale computer station which are 
connected to the customer computer station over the Internet and are thus more 
susceptible to fraudulent interference. 

If the customer is certified and the customer agreed to pay for the 

30 goods as disclosed hereinbelow, the software module of the ISP server records 
the transaction details (242, FIGURE 11) into a data memory 244 including the 
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customer's user name, the current date and time, the price of the service or 
product and the terms of payment. The ISP server then connects to the STS and 
infonns the STS whether the customer confirmed or denied the transaction and 
whether the customer is certified to pay through the STSP, and may also transfer 

5 the transaction details back to the STS for validation. 

The STS then connects to the point of sale computer station using the 
information obtained from the STS's LUT as disclosed hereinabove, and informs 
the point of sale computer station whether or not to supply the customer with the 
requested service or product. The STS may also provide the point of sale 

10 computer station with the reason for denial of the service or product. On receipt 
of confirmation of the transaction from the STS, the point of sale computer station 
supplies the product or service to the customer. For example, if the ordered 
goods are a tangible product, the point of sale computer station processes the 
order and issues instructions for mailing the product to the customer. Alternatively, 

15 if the customer purchased non-tangible goods such as access to a database, the 
point of sale computer station enables the customer's computer station to access 
the database. In another example, if the customer purchased a software product, 
the point of sale computer station will download the software product over the 
Internet to the customer's computer station. 

20 On receipt of a denial of the transaction, the point of sale computer 

station informs the customer computer station of the reason for which it can not 
fulfill the request. 

From time to time, the STSP provides the financial service such as the 
bank or the credit card company with periodic reports including the details of all 
25 the transactions performed over a period of time. For each transaction, the details 
include the credit card number or bank account number of the ISP from which the 
transaction was initiated, the credit card number or bank account number of the 
vendor involved in the transaction and the amount and date of payment or 
payments. 
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The financial service provider transfers the proper amounts from the 
ISPs to the relevant vendors. The financial service provider may also deduct a 
commission for itself and/or for the STSP and/or for the ISP. 

The ISP bills the customer for the transactions performed by the 

5 customer according to the billing agreement already existing between the 
customer and the ISP. 

It is noted that, the billing of the customer could alternatively be done by 
another party, such as a telephone company, in which case all the relevant billing 
details are transferred from the STSP to this party. . 

10 It is further noted that the term ISP is used throughout the present 

application to represent any organization providing Internet access to one or more 
computer station. The organization may or may not charge a fee for supplying 
Internet access. For example the terni ISP may represent a company owning 
equipment through which the employees of the company access the Internet. 

15 Thus, the customer computer stations can be the computer stations used by the 
employees of the company. In such a case, the billing of the customers which are 
company employees for the goods purchased from the vendor may be done by 
deducting the proper amounts from the salary of the employees. 

It is still further noted that, in accordance with another preferred 

20 embodiment of the present invention, if the STS detects a problem during the 
steps of the method disclosed hereinabove, the STS will send a message to the 
relevant server or computer station causing it to cancel the transaction. For 
example, if the point of sale computer station did not inform the STS that the 
goods were supplied, the STS instructs the ISP to delete the relevant billing 

25 record. In another example, if the STS detects communication failures such as 
erroneous data or an inability to contact the point of sale computer station, the 
STS instructs the ISP to delete the relevant billing record. 

Reference is now made to Figs. 2-5. Fig. 2 is a schematic flow chart 
illustrating the steps of a method for Internet billing performed by a customer of 

30 the system of Fig. 1, in accordance with a preferred embodiment of the present 
invention. The customer connects to the Internet using the customer computer 



20 



wo 99/0821 8 PCTAL98/00373 

Station (step 80). The customer enters a vendor's site on a point of sale computer 
station (step 82) and selects goods such as a service or a product which is offered 
for sale by the vendor (step 84). If the point of sale computer station allows 
payment for the selected goods through the STSP, the customer selects this 
payment method (step 86). The customer computer station then receives a 
transaction verification form from one of the STSs of the STSP 20 (step 88) as 
disclosed in detail hereinabove. The customer checks the transaction details 
displayed on the transaction verification form and can confirm or deny his 
willingness to accept the transaction conditions (step 90). For example, the 
customer can click on an "accept" or a "reject" button provided on the transaction 
verification form for confirming or denying the transaction, respectively. 

If the customer did not confimn the transaction on the transaction 
verification form (step 92). the customer's computer station connects to the ISP 
server of the ISP which provides Internet access to the customer, denies the 
transaction and transfers control to step 80. 

If the customer confimned the transaction, the customer computer station 
connects to the ISP server of the ISP which provides Internet access to the 
customer and transfers the transaction details and the transaction confirmation to 
the ISP server (step 94). The customer can then receive the goods from the 
vendor or can alternatively receive a denial message from the vendor and the 
reason for the denial (step 96). For example, the customer can be given access 
to a data base or download a software product from the vendor's server. It is 
noted that if the transaction involved the sale of a tangible product, the product is 
sent by the vendor to the customer by mail or by any other suitable delivery 
method. Thus, in the case that the goods are a tangible product, the customer 
will receive only a transaction confirmation at step 96 and the actual acceptance 
of goods will occur some time in the future. 

Fig. 3 is a schematic flow chart illustrating the steps of a method for 
Internet billing performed by a point of sale computer station of the system of Fig. 
1 , in accordance with a preferred embodiment of the present invention. The point 
of sale computer station waits until a customer requests goods which are payable 
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through the STSP method (step 102). The point of sale computer station checks 
if the customer selected payment through the STSP (step 104). If the customer 
did not select the STSP payment method, the customer can still activate other 
payment methods in the vendor's site according to the customer choice (step 105) 
and control is transferred to step 102. If the customer selected the STSP 
payment method, the point of sale computer station checks if the STS confirmed 
the transaction (step 106). If the STS did not confirm the transaction, the point of 
sale computer station informs the customer through the customer computer 
station of the reasons for denying the goods (step 107) and transfers control to 
step 102. If the STS confirmed the transaction, the point of sale computer station 
checks whether the transaction details sent by the STS are correct (step 108). If 
the transaction details as sent by the STS are not correct, the point of sale 
computer station informs the STS that the goods were not supplied (step 109), 
informs the customer of the reason of denial of goods (step 107) and transfers 
control to step 102. If the transaction details sent by the STS are correct, the 
point of sale computer station checks whether the customer computer station is 
still on-line (step 113). If the customer computer station is not on-line, the point of 
sale computer station informs the STS that the goods were not supplied (step 
115) and transfers control to step 102. If the customer computer station is still 
on-line, the point of sale computer station supplies the goods to the customer as 
disclosed hereinabove (step 117), informs the STS that the goods were supplied 
(step 1 1 9) and transfers control to step 1 02. 

It is noted that if the transaction involved the sale of a tangible product, 
the product will be sent by the vendor to the customer by mail or by any other 
suitable delivery method. 

Fig. 4 is a schematic flow chart illustrating the steps of a method for 
Intemet billing perfomied by a secure transaction server (STS) of the system of 
Fig. 1, in accordance with a preferred embodiment of the present invention. The 
STS receives the transaction details and the point of sale computer station ID 
from the customer computer station (step 110), extracts the ISP server details 
from the database or table as disclosed in detail hereinabove, using the IP 
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address of the customer computer station which is received as part of the 
communication session details (step 111). The STS sends a transaction 
verification form to the customer computer station (step 1 12). 

The STS waits for a reply from the ISP server of the ISP which provides 
service to the customer and then checks whether the ISP server confirmed the 
payment (step 116). If the ISP server has not confirmed the payment, the STS 
connects to the point of sale computer station, instructs the point of sale computer 
station to deny goods from the customer and provides the point of sale computer 
station with the reason for the denial (step 118). The STS then transfers control to 
step 110. If the ISP server confirms payment, the STS connects to the point of 
sale computer station, instructs the point of sale computer station to supply the 
service or product to the customer and sends the transaction details to the point of 
sale computer station (step 120). The STS then checks whether the point of sale 
computer station confirmed that the goods were supplied (step 121). It is noted 
that, if the goods are tangible, the vendor's confirmation may include a 
confirmation that a mailing order for the purchased goods was processed. 

If the point of sale computer station did not confirm that the goods were 
supplied, the STS transfers control to step 110. If the point of sale computer 
station confirmed that the goods were supplied, the STS records the transaction 
details for transfer to the financial service provider (step 122) and transfers control 
to step 110, 

Fig. 5 is a schematic flow chart illustrating the steps of a method for 
Internet billing performed by an ISP server of the system of Fig. 1, in accordance 
with a preferred embodiment of the present invention. The ISP server receives 
the transaction details from the transaction verification form as filled by the 
customer (step 124) and connects to an available STS (step 126). The ISP 
server extractsjhe customer identity according to the communication session 
details (step 127). The customer identity may be an ID number or a user name 
which is used by the ISP for identifying the customer. 

The ISP sen/er checks whether the customer confirmed the payment on 
the customer's transaction verification form (step 128). If the customer did not 
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confirm payment on the transaction verification fomn, tlie ISP server informs the 
STS that the customer refused payment (step 130) and transfers control to step 
124. If the customer confirmed the payment on the transaction verification form, 
the ISP server checks whether the customer is certified to pay through the STSP 

5 (step 132). If the customer is not certified to pay through the STSP, the ISP 
server informs the STS that the customer is not certified (step 133) and transfers 
control to step 124. If the customer is certified, the ISP server informs the STS 
that the payment is authorized and transfers the transaction details to the STS for 
verification (step 134). The ISP server then records the transaction details for 

10 billing the customer (step 136) and transfers control to step 124. 

Many variations may be made to the stnjcture and operations of the 
embodiment described above. Several of these other embodiments are 
described below. In general, much of the structure and many of the operations of 
the embodiments that follow are similar to con-esponding structure and operations 

15 discussed above. Accordingly, the discussion below will generally focus on the 
distinctions between the embodiments and the embodiment described above. 

In another preferred embodiment of the present invention, the network 
service provider provides the transaction verification form to the customer. Here, 
instead of using the secure transaction server to provide the form to the customer, 

20 the embodiment used the secure transaction server to send the necessary 
information to the network service provider to enable the network service provider 
to send the form. 

After the initial communication between the customer computer station 
and the available STS is established as described hereinabove, the STS obtains 

25 the address of the ISP server from the database or table as disclosed 
hereinabove, using the automatically revealed IP address of the customer 
computer station. The STS then sends to the ISP server, the IP address of the 
customer computer station and the transaction details. The STS also causes the 
customer computer station to connect to the ISP server using the address of the 

30 ISP obtained by the STS from the database or table disclosed hereinabove and 
sent to the customer computer station. For example, this can be done by using 
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the HTTP 302 Status Response accompanied by a "Location:" header. The ISP 
server first checks whether the customer is certified to pay through the STSP. if 
the customer is not certified to pay through the STSP. the ISP informs the STS 
that the customer is not certified. If the customer is certified to pay through the 

5 STSP, the ISP sends a transaction verification form to the customer computer 
station. It is noted that the information included in the transaction verification form 
is as disclosed hereinabove for the first preferred embodiment of the present 
invention. The customer then confirms or denies the transaction details and the 
other steps are. in general, performed as disclosed in detail hereinabove. 

10 This embodiment performs similar operations as described in Figs. 

2-5, with a few modifications. For example, at block 88 in Fig. 2, the customer 
receives the transaction from the iSP server, not the STS. At block 1 12 in Fig. 4, 
the STS sends the customer infomriation to the ISP server instead of sending the 
transaction form to the customer. Before block 124 in Fig. 5, the ISP server would 

15 receive the customer information from the STS. In addition, the ISP server would 
send the transaction form to the customer. 

In one embodiment of the invention, the customer interacts only with the 
STS during the verification form procedure. Here, the customer does not send a 
transaction confirmation/denial to the ISP server. Instead, the customer sends the 

20 confirmation/denial to the STS. To ensure that the customer is authorized to 
make the transaction, the STS obtains the identity of the customer from ISP 
server. 

In general, many of the transaction operations performed according to 
this embodiment are similar to the operations discussed above. For example, the 

26 step of validating includes: Automatically receiving by the transaction server from 
the customer computer station of the transaction details and identification 
information for identifying the point of sale computer station and the network 
address of the customer computer station. Identifying the customer. Sending a 
transaction verification form from the transaction server to the customer computer 

30 station, the transaction verification form includes at least the transaction details. 
Entering by the customer in the transaction verification form a confirmation or a 
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denial of the transaction details. Sending by the customer computer station the 
confirmation or the denial of the transaction details from the customer computer 
station to the transaction server. Instructing the point of sale computer station by 
the transaction server to supply or deny the goods to the customer in accordance 
with the confirmation or the denial, respectively, of the transaction details by the 
customer. 

The steps of identifying the customer may include: Sending the 
customer computer station network address from the transaction server to the 
network service provider server. Finding the customer identity by the network 
service provider server. Using the customer computer station network address. 
Sending the customer identity from the network service provider server to the 
transaction sen/er. 

In this embodiment, the customer computer and the point of sale 
station perform similar operations as set forth in Figs. 2 and 3. The operation of 
the ISP server and the STS are set forth in Figs. 6 and 7, respectively. 

In Fig. 6, the ISP server receives the transaction details and customer's 
IP address from the STS (step 140). Next, the ISP server identifies the customer 
according to the IP address (step 142). The customer identity may be, for 
example, an ID number or a user name which is used by the ISP for identifying 
the customer. 

At step 144, if the customer can not carry out the transaction (for 
example, for reasons of an exhausted credit line), the ISP server infonns the STS 
that the customer is not authorized (step 146) and transfers control to step 140. If 
no restrictions arise, the ISP server informs the STS that the payment is 
authorized, a customer identity (customer ID) is sent to the STS (step 148) and 
control is transferred back to step 140, 

In Fig. 7, initially, the STS receives the transaction details and the point 
of sale computer station ID from the customer computer station (step 150). The 
STS then extracts the ISP server details from the database or table (as disclosed 
in detail hereinabove) using the IP address of the customer computer station 
which is received as part of the communication session details (step 152), Next, 
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the STS sends the customer computer station IP address to the ISP server (step 
154). At step 156, the STS determines whether the ISP server of the ISP which 
provides service to the customer identified the customer and confirmed the 
payment. 

If the ISP server has not confirmed the payment, the STS connects to 
the point of sale computer station, instructs the point of sale computer station to 
deny goods from the customer and provides the point of sale computer station 
with the reason for the denial (step 158). The STS then transfers control to step 
150, 

If the ISP server confirms payment and sends the customer 
identification, the STS sends the transaction form to the customer (step 160). In 
addition, assuming the customer accepts the transaction, the STS connects to the 
point of sale computer station. Here, the STS instructs the point of sale computer 
station to supply the service or product to the customer and sends the transaction 
details to the point of sale computer station. 

The STS may then determine whether the point of sale computer station 
confirmed that the goods were supplied (step 162). If the goods are tangible, the 
vendor's confirmation may include a confirmation that a mailing order for the 
purchased goods was processed. 

If the point of sale computer station did not confirm that the goods were 
supplied, the STS transfers control back to step 150. If the point of sale computer 
station confirmed that the goods were supplied, the STS records the customer's 
identity information and transaction details for transfer to the financial service 
provider and ISP for later billing (step 164) and transfers control to step 150. 

In another embodiment of the invention, the network service provider 
identifies the customer using the telephone number of the customer. The 
telephony infrastructure of most modern countries now supports the option to 
identify the initiating side of a telephone call (by transferring his phone number to 
the called party). The customer's telephone number may be supplied to an ISP, 
for example, over the telephone infrastructure when the customer calls the ISP. 
In those ISPs that support this caller identification feature, the phone number from 
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which an ISP's client has connected together with the client's name and IP 
address may be registered and saved on the ISP's servers. 

In accordance with this embodiment of the invention, the customer's 
telephone number may be used to identify the customer and/or to bill the 
5 customer's telephone account for the product the customer purchased from the 
vendor. Here, the ISP supplies the customer's phone number, according to his 
network address. 

The customer's telephone number may be used to verify the identity of 
the caller. For example, in one embodiment the ISP (or STS) maintains a listing 

10 of authorized source telephone numbers for one or more of the customers. In this 
case, the system may deny access to the retail method when the customer 
identity information of the incoming call does not match the corresponding 
authorized telephone number. Thus, this technique may prevent fraudulent use of 
a customer's identity information from non-authorized telephones. 

15 The customer's telephone number may be used to bill the customer. 

For example, in one embodiment, the STS, in cooperation with a telephone 
company, uses the phone number to bill the customer via his phone bill. In 
another embodiment, the STS uses the phone number and/or other client 
information to bill an account of the client (for example, as previously discussed). 

20 The process of identifying the customer includes the steps of sending 

the customer computer station network address from the transaction server to the 
network service provider sen/er, finding the customer phone number by the 
network service provider server, using the customer computer station network 
address, and sending the customer phone number from the network service 

25 provider server to the transaction server. 

In general, many of the transaction operations performed according to 
this embodiment are similar to the operations discussed above. For example, the 
customer computer and the point of sale station perform similar operations as set 
forth in Figs. 2 and 3. The operation of the ISP server and the STS are set forth in 

30 Figs. 8 and 9, respectively. 



28 



wo 99/08218 PCT/IL98/00373 

In Fig. 8, the ISP server receives the transaction details and customer's 
IP address from the STS (step 170). The ISP server identifies the customer and 
extracts the customer phone number according to the IP address (step 172), The 
customer phone number is the phone number from which the customer initiated 

5 the call to the ISP, as recorded by the ISP servers. 

If, at step 174, the customer can not carry out the transaction (for 
example, for reasons of an exhausted credit line), the ISP server informs the STS 
that the customer is not authorized (step 176) and transfers control back to step 
170. If no restrictions arise, the ISP sen/er sends the customer's phone number 

10 to the STS, thus indicating authorization of the payment (step 178) and transfers 
control to step 170. 

In Fig. 9, the STS receives the transaction details and the point of sale 
computer station ID from the customer computer station (step 180), extracts the 
ISP server details from the database or table as disclosed in detail hereinabove 

15 using the IP address of the customer computer station which is received as part of 
the communication session details (step 182). The STS sends the customer 
computer station IP address to the ISP server (step 184) and then checks 
whether the ISP server of the ISP which provides service to the customer 
successfully extracted the customer phone number and confirmed the payment 

20 (step 186). 

If the ISP server has not confirmed the payment, the STS connects to 
the point of sale computer station, instructs the point of sale computer station to 
deny goods from the customer and provides the point of sale computer station 
with the reason for the denial (step 188). The STS then transfers control back to 
25 step 180. 

If the ISP server confirms payment and sends the customer phone 
number, the STS sends the transaction fomi to the customer (step 190). In 
addition, assuming the customer accepts the transaction, the STS connects to the 
point of sale computer station. Here, the STS instructs the point of sale computer 
30 station to supply the service or product to the customer and sends the transaction 
details to the point of sale computer station. 
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The STS then checks whether the point of sale computer station 
confirmed that the goods were supplied (step 192). Again, if the goods are 
tangible, the vendor's confirmation may include a confirmation that a mailing order 
for the purchased goods was processed. 

5 If the point of sale computer station did not confirm that the goods were 

supplied, the STS transfers control back to step 180. If the point of sale computer 
station confirmed that the goods were supplied, the STS records the customer's 
phone number and transaction details for transfer to the financial sen/ice provider 
and telephone company for later billing (step 194) and transfers control to step 

10 180. 

In another embodiment of the invention, the STS, rather than the ISP 
server, determines the identity of the customer.. Much of the ISP equipment 
relevant to the embodiments described herein consists of access servers and 
authentication servers. The access servers are responsible for answering 

15 incoming calls from users' computers, receiving a username and password and 
supplying network services. The authentication servers are responsible for 
verifying the username and password (as given by the access server) and 
instructing the access server whether to supply the required network service to 
the user. Both servers usually register ail accesses and operations. 

20 In accordance with this embodiment of the invention, the secure 

transaction service connects directly to the network service provider access server 
or authentication server or any other relevant server capable of associating the 
customer computer station network address with the customer identity or phone 
number or any other information relevant for billing the customer. The STS may 

25 then retrieve some or all of the stored information that identifies the customer. For 
example, the STS may extract the customer's username. phone number, IP 
address or any other relevant data from the ISP's servers. This may be 
accomplished, for example, using an SNMP command. A significant advantage of 
this embodiment is that it may be implemented without installing the software 

30 module at the ISP. 
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The customer computer and the point of sale server perform similar 
operations as set forth in Figs. 2 and 3. No special operations are required of the 
ISP. The operation of the STS is set forth in Fig. 10. 

In Fig. 10, the STS receives the transaction details and the point of sale 
computer station ID from the customer computer station (step 200), extracts the 
ISP server details from the database or table as disclosed in detail hereinabove, 
using the IP address of the customer computer station which is received as part of 
the communication session details (step 202). Then, at step 204, the STS 
connects directly to the ISP server (such as an access server or an authentication 
server) containing information associating IP addresses with identification 
information (such as usernames or telephone numbers). 

If, at step 206, the identification information is not found on the ISP 
sen/er, the STS connects to the point of sale computer station, instructs the point 
of sale computer station to deny goods from the customer and provides the point 
of sale computer station with the reason for the denial (step 208). The STS then 
transfers control back to step 200. 

If the identification infomiation is found on the ISP server, the STS 
sends the transaction form to the customer (step 210). In addition, assuming the 
customer accepts the transaction, the STS connects to the point of sale computer 
station. Here, the STS instructs the point of sale computer station to supply the 
sen/ice or product to the customer and sends the transaction details to the point of 
sale computer station. 

The STS then checks whether the point of sale computer station 
confirmed that the goods were supplied (step 212). Again, if the goods are 
tangible, the vendor's confirmation may include a confimiation that a mailing order 
for the purchased goods was processed. 

If the point of sale computer station did not confimri that the goods were 
supplied, the STS transfers control to step 200. If the point of sale computer 
station confirmed that the goods were supplied, the STS records the customer's 
identification information and transaction details for transfer to the financial service 
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provider and/or telephone company and/or ISP for later billing (step 214) and 

transfers control to step 200. 

In practice, the system or method of the invention may be practiced in 

conjunction with customer's who use proxy servers. In this case, the proxy 
5 server's Internet address, rather than the customer's Internet address, may be 

provided to the STS or the ISP server. Several methods may be used to obtain a 

customer's actual network address in the event the customer is using a proxy 

server. For example, the address may be obtained from an HTTP 

"Fonwarded-For" header that may be sent. Here, the header will reveal the 
10 customer's address. It should be noted, however, that this method may be easily 

comprised (i.e., false addresses inserted into the header). As a result, the use of 

this method may be restricted to verification operations in some applications. 

The customer's address may be obtained by instructing the customer's 

browser to connect in the background to another service, which the customer 
15 might have requested to be unproxied, such as HTTPS. This can be done, for 

example, by using an HTML tag such as <img src=https://host:port/url>. 

The address may be obtained by instructing the customer's browser to 

connect in the background to another host, which the customer might have 

requested to be unproxied, such as hosts from the domain of his ISP. This can be 
20 done, for example, by using an HTML tag such as <img 

src=https://host.isp.com:port/url> (assuming the domain isp.com was configured 

as unproxied on the customer's computer). 

Finally, an application that will attempt to contact the secure transaction 

service or the network service provider may be downloaded to the customer's 
25 computer station. This would cause the customer's true Internet address to be 

disclosed. This could be done, for example, by instructing the browser to 

download a Java applet that instmcts the customer's computer to connect directly 

to the STS thereby revealing the computer's true address. 

In each case, a large random number is sent from the STS to the 
30 customer computer station, and is then sent back from the customer computer 

station to the STS over the newly established connection. This can be done for 
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example, by inserting the said number in the URL of the said HTML tag, or by 
instructing the said application to echo the said large number when received. This 
procedure verifies that the reported IP is known by the Intemet infrastructure and 
further reduces the possibility of fraud. 

Further to the above, it is noted that communication between the point of 
sale computer station and the STS and between the ISP server and the STS can 
be secured communication. The communication can be secured using a method 
of encryption such as the data encryption standard (DES) or any other suitable 
encryption method. A method of authentication can also be used for increased 
security such as a public key or shared key digital signature method or any other 
suitable authentication method. This ensures that the transaction verification 
procedures serve as an encrypted secured verification step and reduces the 
possibility of fraud. 

It should be noted that any communication between two parties could in 
fact be done through a third party. For example, the final confimiation sent from 
the STS to the vendor could be transferred through the customer. In this case, 
some method of digital signature could be added to the message in order to 
protect it from accidental or malicious modification. 

It is further noted that the retail method of the present invention has the 
advantage that a vendor needs only establish one agreement with an STSP in 
order to be able to provide a secure payment method to all the customers of all 
the ISPs which are connected with the STSP. Another advantage of the STSP 
method is that an ISP needs to establish only one agreement with the STSP in 
order to provide a secure payment method between any one of its customers and 
any of the vendors that have agreements with the STSP, thus, the ISP does not 
need to establish separate agreements with many vendors. 

Another advantage of the retail method of the present invention is that 
the customer can perform secured transactions with all the vendors which have 
agreements with the STSP, without having to install any software on his computer 
station. 
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Moreover, using the retail method of the present invention, the customer 
can perform transactions without having to transmit any sensitive information such 
as a credit card or account number or other personal details over the Internet. 

It is noted that, in accordance with another preferred embodiment of the 

6 present invention, no billing is performed by the STS, the ISP or the financial 
service provider. Instead, the ISP sends to the STS the e-mail address of the 
customer and the STS periodically sends e-mail messages to the customer 
reminding the customer of his debt to the vendor from which the goods were 
received until the vendor informs the STS that the debt has been paid. 

10 Alternatively, in accordance with another preferred embodiment of the 

present invention, the STS Instructs the ISP to periodically send e-mail messages 
to the customer reminding the customer of his debt to the vendor from which the 
goods were received. When the vendor informs the STS that the debt has been 
paid, the STS instructs the ISP to stop sending the e-mail messages to the 

15 customer. 

It is still further noted that, in accordance with another preferred 
embodiment of the present invention, the vendor may decide to supply the goods 
to the customer prior to validating the purchasing as disclosed hereinabove. In a 
non-limiting example, the vendor may provide the customer with access to a 

20 database and if the customer finds the information useful, the customer agrees to 
pay for the information, for example by activating a designated HTML link. The 
link connects the customer computer station to the STS, transfers the ID of the 
point of sale computer station and the transaction details to the STS as disclosed 
in step 110 of Fig. 4 and continues with the other steps of Fig. 4 as disclosed 

25 hereinabove. 

In another non-limiting example, the customer downloads software from 
the point of sale computer station for checking the software prior to performing 
step 80 of Fig. 2. If the customer decides to pay for the software, the customer 
connects to the point of sale computer station and performs steps 80 to 94 ( Fig. 

30 2) as disclosed hereinabove. It is noted that, in the last example, step 96 is not 
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performed since the software was already downloaded to the customer computer 
station. 

While certain specific embodiments of the invention are disclosed as 
typical, the invention is not limited to these particular forms, but rather is 
5 applicable broadly to all such variations as fall within the scope of the appended 
claims. To those skilled in the art to which the invention pertains many 
modifications and adaptations will occur. Thus, the specific structures discussed 
in detail above are merely illustrative of a few specific embodiments of the 
invention. 
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CLAIMS 

1 . A method of performing a commercial transaction, wherein a customer 
uses a customer computer station that is connected to a network to 
establish a connection with a vendor application that runs on a server 
that is connected to the network, the method comprising the steps of: 

establishing a connection from the customer computer station to the 
vendor application via a network sen/ice provider; 
initiating a transaction with the vendor application; 
receiving, by the network service provider, customer identity 
information from the customer computer station; 
transferring customer transaction information to a transaction service; 
providing transaction authorization to the vendor application; and 
providing a product associated with the transaction. 

2. The method of claim 1 wherein the transferring step includes the step of 
extracting, by the transaction service, the customer identity information 
from the network service provider and wherein the method further 
includes the step of associating, by the transaction service, the customer 
identity information with a financial account. 

3. The method of claim 1 wherein the customer identity information 
comprises caller identification information. 

4. The method of claim 3 further including the steps of billing an account of 
the customer that is associated with the caller identification information, 

5. The method of claim 1 wherein the receiving step comprises the steps of 
extracting, by the transaction service, customer identity information 
associated with an IP address from the network service provider; and 
associating, by the transaction service, the customer identity information 
with a financial account. 

6. The method of claim 1 further comprising the step of obtaining a 
customer's IP address from an HTTP "Forwarded-For" header. 
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7. The method of claim 1 further comprising the step of obtaining a 
customer's IP address by instructing a customer's browser to connect in 
the background to an unproxied service. 

8. The method of claim 1 further comprising the step of obtaining a 
customer's IP address by instructing a customer's browser to connect in 
the background to an unproxied host. 

9. The method of claim 1 further comprising the step of obtaining a 
customer's IP address by downloading an application on the customer's 
computer station whereby the application contacts the transaction service 
or the network service provider. 

10. A method of performing a commercial transaction, wherein a customer 
uses a customer computer station that is connected to a network to 
establish a connection with a vendor application that runs on a server 
that is connected to the network, the method comprising the steps of: 

establishing a connection from the customer computer station to the 

vendor application via a network service provider; 

initiating a transaction with the vendor application; 

establishing a connection from the customer computer station to a 

transaction server; 

obtaining identity information for the customer; 

determining whether the customer is authorized to conduct the 

transaction; 

providing transaction authorization to the vendor application; 
providing a product associated with the transaction; and 
recording details related the transaction. 

1 1 . The method of claim 10 wherein the obtaining step includes the step of 
extracting, by the transaction sen/er, the identity information from the 
network service provider and wherein the determining step includes the 
step of associating, by the transaction server, the identity information with 
a financial account. 
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12. The method of claim 10 wherein the identity information comprises caller 
identification information. 

13. The method of claim 10 wherein the obtaining step comprises the steps 
of extracting, by the transaction server, identity information associated 
with an IP address from the network service provider; and associating, by 
the transaction server, the identity information with a financial account. 

14. The method of claim 1 0 further comprising the step of obtaining a 
customer's true IP address in the event the customer uses a proxy. 

15. An accounting method for commercial transactions, wherein customers 
order products from vendors via a network, the method comprising the 
steps of: 

establishing a plurality of customer accounts with a network service 
provider; 

establishing a plurality of vendor accounts with the network service 
provider; 

commencing a transaction between one of the customers and one of 

the vendors via the network service provider; 

obtaining identity information for the one customer; 

determining whether one of the customer accounts is associated with 

the one customer; 

providing transaction authorization to the one vendor; 
debiting a customer account that is associated with the one 
customer; and 

crediting a vendor account that is associated with the one vendor. 

16. The method of claim 1 5 wherein the obtaining step includes the step of 
extracting, by the transaction server, the identity information from the 
network service provider and wherein the determining step includes the 
step of associating, by the transaction server, the identity information with 
one of the customer accounts. 
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17. The method of claim 1 5 wherein the identity information comprises caller 
identification information. 

18. The method of claim 15 wherein the obtaining step further comprises the 
step of extracting, by a transaction server, identity information associated 
with an IP address from the network service provider; and wherein the 
detennining step further comprises the step of associating, by the 
transaction server, the identity infomiation with a financial account. 

1 9. The method of claim 1 5 further comprising the step of obtaining a 
customer's true IP address in the event the customer uses a proxy. 

20. An accounting method for commercial transactions, wherein customers 
order products from vendors via a network, the method comprising the 
steps of: 

establishing at least one financial agreement between a transaction 
service and at least one vendor; 

establishing at least one financial agreement between the transaction 

service and at least one network service provider; 

initiating a transaction between one of the customers and one of the 

vendors; 

obtaining identity information for the one customer; 
remitting payment to the one vendor according to the at least one 
financial agreement between the transaction service and at least one 
network service provider; and 

obtaining payment from the one customer according to the at least 
one financial agreement between the transaction service and at least 
one network service provider. 

21 . The method of claim 20 wherein the obtaining identity information step 
includes the step of extracting, by the transaction service, the identity 
information from the network service provider and wherein the method 
further includes the step of associating, by the transaction service, the 
identity information with a financial account. 



39 



wo 99/08218 PCTAL98/00373 

22. The method of claim 20 wherein the identity information comprises caller 
identification information. 

23. The method of claim 20 wherein the obtaining step further comprises the 
step of extracting, by the transaction service, Identity information 
associated with an IP address from the network service provider; and 
wherein the remitting step further comprises the step of associating, by 
the transaction service, the identity information with a financial account. 

24. The method of claim 20 further comprising the step of obtaining a 
customer's true IP address in the event the customer uses a proxy. 

25. A retail method over a wide area network including a point of sale 
computer station, a network service provider server operated by a 
network service provider, a customer computer station used by a 
customer and connected to said wide area network through the network 
service provider server, and a transaction server having access to 
identification information of said network service provider and said point 
of sale computer station, the method comprising the steps of: 

connecting said customer computer station to said point of sale 
computer station; 

purchasing goods from said point of sale computer station by said 
customer; 

obtaining identity information from the customer computer station; 
validating said purchasing by said transaction server and said 
network service provider server; 

charging said customer for said purchasing, said charging comprising 
a transaction including the steps of billing an account of said 
customer by said network service provider server a transaction sum 
and billing by said transaction server an account of said network 
service provider server said transaction sum; 
supplying said goods to said customer; and 
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remitting a portion of said transaction sum to a vendor operating said 
point of sale computer station. 

26. The method of claim 25 wherein the obtaining step includes the step of 
extracting, by the transaction server, the identity information from the 

5 network service provider and wherein the validating step includes the 

step of associating, by the transaction server, the identity information with 
at least one account. 

27. The method of claim 25 wherein the identity information comprises caller 

identification information.. 

10 28, The method of claim 25 wherein the obtaining step further comprises the 
step of extracting, by the transaction server, identity information 
associated with an IP address from the network service provider server; 
and wherein the validating step further comprises the step of associating, 
by the transaction server, the identity information with the account. 

15 29. The method of claim 25 further comprising the step of obtaining a 
customer's true IP address in the event the customer uses a proxy. 

30. A system for using a retail method over a wide area network, the system 
comprising: 

at least one network service provider server operated by a network 
20 service provider and connected to said wide area network; 

at least one customer computer station used by a customer and 
connected to said wide area network through one of said at least one 
network service provider server; 

at least one point of sale computer station connected to said wide 
25 area network; and 

at least one transaction server having access to identification 
information of said at least one network service provider and said at 
least one point of sale computer station and connected to said wide 
area network, 
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wherein said retail method comprises the steps of: 

connecting one of said at least one customer computer station to one 

of said at least one point of sale computer station; 

purchasing goods from said one point of sale computer station by 

said customer operating said one customer computer station; 

obtaining identity information from the one customer computer 

station; 

validating said purchasing by one of said at least one transaction 
server and one of said at least one network service provider server; 
charging said customer for said purchasing, said charging comprising 
a transaction including the steps of billing an account of said 
customer by said one network service provider server a transaction 
sum and billing by said one transaction server an account of said 
network service provider server said transaction sum; 
supplying said goods to said customer; and 

remitting a portion of said transaction sum to a vendor operating said 

one point of sale computer station. 

31 . The method of claim 30 wherein the obtaining step includes the step of 
extracting, by the transaction server, the identity information from the 
network service provider and wherein the validating step includes the 
step of associating, by the transaction server, the identity information with 
the account. 

32. The system of claim 30 wherein the identity information comprises caller 
identification information. 

33. The system of claim 30 wherein the obtaining step further comprises the 
step of extracting, by the transaction server, identity information 
associated with an IP address from the network service provider server; 
and wherein the validating step further comprises the step of associating, 
by the transaction server, the identity information with the account. 
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The system of claim 30 wherein the retail method further comprises the 
step of obtaining a customer's true IP address in the event the customer 
uses a proxy. 

A retail method over a wide area network including a point of sale 
computer station a network service provider server operated by a network 
service provider, a customer computer station used by a customer and 
connected to said wide area network through the network service 
provider server, and a transaction server having access to identification 
information of said network service provider and said point of sale 
computer station, the method comprising the steps of: 

connecting said customer computer station to said point of sale 

computer station; 

purchasing goods from said point of sale computer station by said 

customer; 

validating said purchasing by said transaction server and said 
network service provider server; 

charging said customer for said purchasing, said charging 
comprising a transaction including the steps of billing an account of 
said customer by said network service provider server a transaction 
sum and billing by said transaction server an account of said network 
service provider server said transaction sum; 

supplying said goods to said customer; and 

remitting a portion of said transaction sum to a vendor operating 
said point of sale computer station. 

The retail method according to claim 35 further including the step of 
remitting a portion of said transaction sum to a network service provider 
operating said network service provider server. 

The retail method according to claim 35 further including the step of 
remitting a portion of said transaction sum to the transaction service 
provider operating said transaction server 
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The retail method according to claim 35 wherein said step of validating 

comprises the steps of: 

automatically receiving by said transaction server from said 
customer computer station of transaction details of said transaction 
and identification information for identifying said point of sale 
computer station and the network address of said customer computer 
station; 

sending a transaction verification form from said transaction server 
to said customer computer station, said transaction verification form 
including at least said transaction details and information for 
contacting said network service provider server; 

entering by said customer in said transaction verification form a 
confirmation or a denial of said transaction details; 

sending by said customer computer station of said transaction 
details and said confirmation or said denial of said transaction details 
from said customer computer station to said network service provider 
server using said information for contacting said network service 
provider server included in said transaction verification form; 

informing said transaction server by said network service provider 
server of said confirmation or said denial of said transaction details 
by said customer in said transaction verification form; and 

instructing said point of sale computer station by said transaction 
server to supply or deny said goods to said customer in accordance 
with said confirmation or said denial, respectively, of said transaction 
details by said customer. 

The retail method according to claim 35 wherein said identification 
information of said network service provider and said point of sale 
computer station comprises: 

information for associating a customer network address with a 
network service provider and technical information needed to contact 
said network service provider server; and 
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information for associating said vendor with the technical information 
needed to contact said point of sale computer station over said wide 
area network. 

40. The retail method according to claim 39 wherein said identification 
information is stored on said transaction server. 

41 . The retail method according to claim 35 wherein said wide area network 
is the Internet, said network service provider is an Internet service 
provider and wherein said information for associating a customer 
comprises at least the IP address space of said Internet service provider 
and technical information needed to contact said Internet service 
provider, and wherein said information for associating said vendor is 
technical information needed to contact said point of sale computer 
station over the Internet. 

42. The retail method according to claim 35 wherein said step of charging 
further includes the step of recording by said network service provider 
server of said transaction details for billing said customer by said network 
service provider. 

43. The retail method according to claim 35 wherein said step of remitting 
comprises the step of crediting an account of said vendor by said portion 
of said transaction sum. 

44. The retail method according to claim 43 wherein said step of crediting is 
performed by a financial service provider. 

The retail method according to claim 44 wherein said financial service provider 
is selected from the group consisting of a bank and a credit card 
company. 

The retail method according to claim 43 wherein said account of said vendor is 
a bank account or a credit card account. 

The retail method according to claim 35 wherein said step of validating 
comprises the steps of: 
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automatically receiving by said transaction server from said 
customer computer station of transaction details of said transaction 
and identification infomnation for identifying said point of sale 
computer station and the network address of said customer computer 
station; 

sending said transaction details and the network address of said 
customer computer station from said transaction server to said 
network service provider server; 

said transaction server causing said customer computer station to 
contact said network sen/ice provider; 

sending a transaction verification form from said network service 
provider server to said customer computer station, said transaction 
verification form including at least said transaction details; 

entering by said customer in said transaction verification form a 
confirmation or a denial of said transaction details; 

sending by said customer computer station of said transaction 
details and said confirmation or said denial of said transaction details 
from said customer computer station to said network service provider 
server; 

informing said transaction server by said network service provider 
server of said confirmation or said denial of said transaction details 
by said customer in said transaction verification form; and 

instructing said point of sale computer station by said transaction 
server to supply or deny said goods to said customer in accordance 
with said confirmation or said denial, respectively, of said transaction 
details by said customer. 

The retail method according to claim 35 wherein communication between 
said point of sale computer station and said transaction server and 
between said transaction server and said network service provider server 
is encrypted. 
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The retail method according to claim 35 wherein the transaction service provider 
operating said transaction server establishes a remitting agreement with 
said vendor for remitting a portion of the transaction sum to said vendor 
after said step of charging, wherein said remitting agreement is 
established prior to using said retail method and wherein said 
transaction service provider establishes a billing agreement with said 
network service provider for billing an account of network service provider 
said transaction sum for goods purchased by said customer from said 
point of sale computer station, wherein said billing agreement is 
established prior to using said retail method. 

46. The retail method according to claim 49 wherein said network service 
provider establishes a billing agreement with said customer for billing an 
account of said customer said transaction sum for goods purchased by 
said customer from said point of sale computer station, wherein said 
billing agreement is established prior to using said retail method. 

47. The retail method according to claim 38 wherein a per transaction billing 
agreement is established between said customer and said network 
service provider for billing an account of said customer said transaction 
sum for goods purchased by said customer from said point of sale 
computer station. 

48. A system for using a retail method over a wide area network, the system 
comprising: 

at least one network service provider server operated by a network 
service provider and connected to said wide area network; 

at least one customer computer station used by a customer and 
connected to said wide area network through one of said at least one 
network service provider server; 

at least one point of sale computer station connected to said wide 
area network; and 
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at least one transaction server having access to identification 
information of said at least one network service provider and said at 
least one point of sale computer station and connected to said wide 
area network, 

wherein said retail method comprises the steps of: 

connecting one of said at least one customer computer station to 
one of said at least one point of sale computer station; 

purchasing goods from said one of said at least one point of sale 
computer station by said customer operating said one of said at least 
one customer computer station; 

validating said purchasing by one of said at least one transaction 
server and one of said at least one network service provider server; 

charging said customer for said purchasing, said charging 
comprising a transaction including the steps of billing an account of 
said customer by said one of said at least one network service 
provider server a transaction sum and billing by said one of said at 
least one transaction server an account of said one of said at least 
one network service provider server said transaction sum; 

supplying said goods to said customer; and 

remitting a portion of said transaction sum to a vendor operating 
said one of said at least one point of sale computer station. 

49. The system according to claim 52 wherein said step of validating 
comprises the steps of: 

automatically receiving by said one of said at least one transaction 
server from said one of said at least one customer computer station 
of transaction details of said transaction and identification information 
for identifying said one of said at least one point of sale computer 
station and the network address of said one of said at least one 
customer computer station; 

sending a transaction verification fomri from said one of said at 
least one transaction server to said one of said at least one customer 
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computer station, said transaction verification form including at least 
said transaction details and information for contacting said one of 
said at least one network service provider server; 

entering by said customer in said transaction verification form a 
confirmation or a denial of said transaction details; 

sending by said customer computer station of said transaction 
details and said confirmation or said denial of said transaction details 
from said one of said at least one customer computer station to said 
one of said at least one network service provider server using said 
information for contacting said one of said at least one network 
service provider server included in said transaction verification form; 

informing said one of said at least one transaction server by said 
one of said at least one network service provider server of said 
confirmation or said denial of said transaction details by said 
customer in said transaction verification form; and 

instructing said one of said at least one point of sale computer 
station by said one of said at least one transaction server to supply or 
deny said goods to said customer in accordance with said 
confirmation or said denial, respectively, of said transaction details by 
said customer. 

The system according to claim 52 wherein said step of validating 
comprises the steps of: 

automatically receiving by said one of said at least one transaction 
server from said one of said at least one customer computer station 
of transaction details of said transaction and identification information 
for identifying said one of said at least one point of sale computer 
station and the network address of said one of said at least one 
customer computer station; 

sending said transaction details and the network address of said 
one of said at least one customer computer station from said one of 
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said at least one transaction server to said one of said at least one 
network service provider server; 

said one of said at least one transaction server causing said one 
of said at least one customer computer station to contact said one of 
said at least one network service provider; 

sending a transaction verification form from said one of said at 
least one network service provider server to said one of said at least 
one customer computer station, said transaction verification form 
including at least said transaction details; 

entering by said customer in said transaction verification form a 
confirmation or a denial of said transaction details; 

sending by said one of said at least one customer computer 
station of said transaction details and said confirmation or isaid denial 
of said transaction details from said one of said at least one customer 
computer station to said one of said at least one network service 
provider server; 

informing said one of said at least one transaction server by said 
one of said at least one network service provider server of said 
confirmation or said denial of said transaction details by said 
customer in said transaction verification form; and 

instructing said one of said at least one point of sale computer 
station by said one of said at least one transaction server to supply or 
deny said goods to said customer in accordance with said 
confirmation or said denial, respectively, of said transaction details by 
said customer. 

51. The system according to claim 52 wherein said identification information 
of said one of said at least one network service provider and said one of 
said at least one point of sale computer station comprises: 

information for associating a customer network address with a 
network service provider and with technical information needed to 
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contact said one of said at least one network service provider server; 
and 

information for associating said vendor with the technical information 
needed to contact said one of said at least one point of sale 
computer station over said wide area network. 

52. The system according to claim 55 wherein said identification information 
is stored on said at least one transaction server. 

53. The system according to claim 55 wherein said wide area network is the 
Internet, said at least one network service provider is an Internet service 
provider and wherein said information for associating a customer 
comprises at least the IP address space of said one of said at least one 
Internet service provider and technical information needed to contact said 
one of said at least one Internet service provider, and wherein said 
information for associating said vendor is technical information needed to 
contact said one of said at least one point of sale computer station over 
the Internet. 

54. The system according to claim 52 wherein communication between said 
one of said at least one point of sale computer station and said one of 
said at least one transaction server and between said one of said at least 
one transaction server and said one of said at least one network service 
provider sen/er is encrypted. 
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